IT Audit
Auditing information systems, cybersecurity, cloud, and AI governance against international standards (ITGC and application controls).
Audit · Technology · Assurance
Mostafa Maarof
Head of Audit Group at Egypt's Accountability State Authority.
A senior audit professional working where public accountability meets emerging technology — from auditing artificial intelligence and cloud computing to building evidence-driven tools for auditors.
CIACISACFEAAIAACCA CertIPSASIDI Trainer
6th
Annual WGISTA meeting, chaired and delivered in Cairo
3
audit domains: IT, Performance and Compliance
About
Audit expertise at the frontier of technology
Mostafa Maarof is an audit and information technology specialist with experience spanning the public and private sectors, as well as international organizations. His expertise includes IT audit, performance audit, financial audit, and compliance audit, with a strong focus on applying artificial intelligence, data analytics, and emerging technologies to advance the auditing profession and strengthen the capabilities of Supreme Audit Institutions.
As a member of the INTOSAI Working Group on the Impact of Science and Technology on Auditing (WGISTA), he contributes to international initiatives aimed at enhancing the capacity of Supreme Audit Institutions (SAIs) to address the opportunities and challenges arising from artificial intelligence and other emerging technologies. He also serves as a member of other INTOSAI working groups, including the Working Group on Information Technology Audit (WGITA) and the Working Group on Big Data (WGBD). In addition, he is a member of the Egyptian Accountability State Authority's team responsible for preparing the **Maat Initiative**, which was presented at the **25th INCOSAI** in **Sharm El-Sheikh, Egypt**.
He co-authored the INTOSAI (WGITA) guidance on auditing artificial intelligence and cloud computing, is a certified trainer of the INTOSAI Development Initiative (IDI), and builds analytics and evidence-based retrieval tools for auditors.
Expertise
What I do
Four domains where government audit meets technology and international standards.
Performance Audit
Assessing the economy, efficiency, and effectiveness of public programs and spending, with evidence-based use-case catalogues.
Compliance Audit
Verifying conformity with laws, regulations, and public-finance frameworks — including data protection (Law 151/2020).
AI & Emerging Technology
Co-author of guidance on auditing AI and the cloud, and builder of RAG and data-analytics tools for audit.
International roles
Leadership within the INTOSAI community
Guidance on auditing AI and cloud computing
INTOSAI WGITA — co-author
Cybersecurity Audit Guidance
WGITA — GAO-led, with Egypt as a supporting SAI
The MAAT AI Initiative
Strategy, charter & governance framework — presented at INCOSAI XXV
Certified Trainer
INTOSAI Development Initiative (IDI) — training to multiple SAIs
Publications & guidance
Selected papers & professional guidance
A sample list — each entry will link to the full document, managed from the dashboard.
2026Guidance
Auditing Artificial Intelligence & Cloud Computing
2026Framework
Are We Ready? An AI Readiness Framework for SAIs
2026Initiative
The MAAT Initiative: Strategy, Charter & Governance
2026Paper
SAI Readiness for Big Data
2026Catalogue
Arabic Performance Audit Use-Case Catalogues
Training library
Courses & lectures delivered
A library of programmes authored and delivered to Supreme Audit Institutions and training providers.
IT & Technology Audit
Internal Control & Anti-Fraud
Events & news
Recent work & engagements
Sample cards showing how events and news — with images, video, or articles — will appear, all managed from the admin dashboard.
Event
Cairo, 2026
6th Annual WGISTA Meeting
Chairing the annual meeting of the INTOSAI working group, with a panel of AI experts from outside the INTOSAI community.
Read more: 6th Annual WGISTA MeetingNews
Sharm El-Sheikh, 2026
MAAT Initiative presented at INCOSAI XXV
Introducing the MAAT AI Initiative to the INTOSAI community, built on a readiness assessment of 54 SAIs across 8 regions.
Read more: MAAT Initiative presented at INCOSAI XXVVideo
Tunisia, 2026
SAI readiness for big data
Presenting ASA's paper at the "Tech Spring" session of the 8th ARABOSAI IT Audit Working Group meeting.
Read more: SAI readiness for big dataArticle
Article
Auditing AI: a practical framework for SAIs
A look at the "Are We Ready?" framework — six dimensions and a five-stage maturity model for SAI readiness.
Read more: Auditing AI: a practical framework for SAIsArticle
Article
From evidence to assurance: RAG tools in audit
How evidence-backed retrieval tools help auditors tie conclusions to their original sources.
Read more: From evidence to assurance: RAG tools in audit
EventHarbin, 2025
Engagements at the INTOSAI WGBD meetings
Consecutive participation in the Big Data working group meetings across several countries, sharing ASA's analytics experience.
Read more: Engagements at the INTOSAI WGBD meetings
Gallery
Moments from meetings & the field
Sample image gallery — photos and captions will be uploaded and arranged from the dashboard.
WGISTA annual meeting — Cairo
INCOSAI XXV — Sharm El-SheikhARABOSAI — Tunisia
Panel discussion
Training delivery
WGBD — Harbin
Contact
Let's talk
For professional collaboration, speaking invitations, or inquiries about INTOSAI and technology-audit work.
contact@mostafamaarof.com